Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/JUkO4J2nl4FLSgbUr7-IRXULc1o.roa
File: JUkO4J2nl4FLSgbUr7-IRXULc1o.roa (raw, json)
Hash identifier: 7UHXBfkypBIg3u+71fHzlZofUBvGoQ8ay4oyLHuGIaY=
Subject key identifier: 25:49:0E:E0:9D:A7:97:81:4B:4A:06:D4:AF:BF:88:45:75:0B:73:5A
Certificate issuer: /CN=9ae07c94a8a6af7a5d18f4eaaea79e26df932214
Certificate serial: 018CCA990703EBCF1EE201B606A9390071BB
Authority key identifier: 9A:E0:7C:94:A8:A6:AF:7A:5D:18:F4:EA:AE:A7:9E:26:DF:93:22:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/JUkO4J2nl4FLSgbUr7-IRXULc1o.roa
Signing time: Tue 02 Jan 2024 14:34:35 +0000
ROA not before: Tue 02 Jan 2024 14:34:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42205
IP address blocks: 185.214.28.0/22 maxlen: 22
185.202.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:07:03:eb:cf:1e:e2:01:b6:06:a9:39:00:71:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae07c94a8a6af7a5d18f4eaaea79e26df932214
Validity
Not Before: Jan 2 14:34:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25490ee09da797814b4a06d4afbf8845750b735a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9c:8a:5c:98:48:db:9b:e3:9c:43:fa:0d:05:
43:fb:9f:34:02:08:c8:04:5b:70:fe:71:e5:1c:a8:
f9:ff:6d:bc:80:0e:d9:51:d0:20:ed:ad:50:a6:3f:
e8:eb:22:64:46:86:ee:eb:92:60:3e:ea:f9:4e:56:
97:28:26:56:32:65:05:46:6e:fd:73:77:20:df:4f:
70:18:b3:d5:31:1a:25:0e:03:6c:68:a4:10:d9:c7:
eb:2d:c0:89:7b:6a:e6:08:f1:15:a7:5f:b9:cc:81:
10:78:95:ec:6c:8f:03:3d:b3:34:d6:aa:59:4e:d9:
1e:af:49:12:70:00:1b:ed:79:74:02:55:66:e6:5f:
89:3b:c6:be:43:a3:d4:35:ac:4b:9b:6b:67:7c:a3:
10:42:6d:90:e0:04:9f:e1:e9:73:b9:52:f6:38:b9:
5e:75:81:89:75:51:3f:36:d4:33:2b:ff:85:0e:df:
58:2a:1c:02:03:78:57:c7:96:66:6c:75:cb:1e:c5:
8d:5d:8f:ac:04:aa:93:96:0e:b2:e3:9d:f9:78:99:
21:2f:2a:bb:7b:a3:73:d7:9c:6b:a5:80:85:a5:13:
41:1a:b7:c9:3a:19:49:00:c3:99:e8:c7:de:75:8f:
72:e7:e1:33:d0:2d:43:b6:e7:97:7b:13:4d:fb:5c:
e2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:49:0E:E0:9D:A7:97:81:4B:4A:06:D4:AF:BF:88:45:75:0B:73:5A
X509v3 Authority Key Identifier:
keyid:9A:E0:7C:94:A8:A6:AF:7A:5D:18:F4:EA:AE:A7:9E:26:DF:93:22:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/JUkO4J2nl4FLSgbUr7-IRXULc1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.136.0/22
185.214.28.0/22
Signature Algorithm: sha256WithRSAEncryption
65:2c:ef:e7:44:90:02:19:c2:d4:1b:bc:9d:73:13:8c:b1:c1:
88:13:dd:57:c8:2a:83:be:68:d7:b6:5a:bd:3b:43:f8:00:29:
e5:c0:e0:b5:52:09:f7:74:b1:b6:c1:05:f4:1d:56:ed:86:28:
2f:64:12:d4:8d:9e:6f:27:08:5a:46:54:63:7f:6a:8e:99:b5:
d2:ab:8c:ae:20:03:14:77:4a:0a:99:47:76:a1:ae:df:c3:4c:
26:ea:c4:b4:d5:aa:3a:7a:d9:42:3c:a9:e8:b4:d7:0d:27:17:
cf:ec:1e:03:82:64:ba:50:40:e5:da:31:d5:6d:ad:9f:73:c0:
91:1c:7f:97:34:00:c6:a3:de:a5:07:7c:d8:3f:d0:ce:8d:07:
f3:1b:4f:e5:7f:2e:5d:23:dc:77:2d:cd:16:e7:aa:79:33:11:
46:4f:8f:63:74:ad:2d:85:03:9f:84:95:a6:92:5e:a3:b7:11:
2c:d0:c5:92:c8:7b:85:4e:fb:11:02:da:4b:d2:16:1c:e0:75:
76:3c:79:ef:88:7a:30:fb:22:46:f1:8b:4f:84:08:50:6a:4c:
ca:e0:57:ab:e5:1c:0a:93:01:ba:98:7c:c1:6e:3d:94:60:1c:
3b:45:54:30:d4:51:d9:20:f3:62:4e:58:86:04:7d:10:9e:64:
1c:1e:99:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:36:36 2024 by rpki-client on console-ams.rpki-client.org